| Package | Description |
|---|---|
| com.entrust.toolkit.x509.policies |
Contains classes used to check security policies issued by an Entrust PKI — password rules and client
settings, for example.
|
| Modifier and Type | Class and Description |
|---|---|
class |
AttributeCertificate
This class represents an attribute certificate from a PKI 4.0.
|
class |
EntrustPolicyCertificate
This class represents a policy certificate, specified by the following:
-- AttributeCertificate ::= SIGNED {AttributeCertificateInfo}
AttributeCertificate ::= SEQUENCE
{
unsignedAttributeCertificate AttributeCertificateInfo,
algorithm AlgorithmIdentifier,
signature BIT STRING
}
AttributeCertificateInfo ::= SEQUENCE
{
version AttCertVersion DEFAULT v1,
owner Owner,
issuer AttCertIssuer,
signature AlgorithmIdentifier,
serialNumber CertificateSerialNumber,
attrCertValidityPeriod AttCertValidityPeriod,
attributes SEQUENCE OF Attribute,
issuerUniqueID UniqueIdentifier OPTIONAL,
extensions Extensions OPTIONAL
}
AttCertVersion ::= INTEGER {v1(0), v2(1)}
Owner ::= SEQUENCE
{
baseCertificateID [0] IssuerSerial OPTIONAL,
-- the issuer and serial number of the owner's Public Key Certificate
entityName [1] GeneralNames OPTIONAL,
-- the name of the claimant or role
objectDigestInfo [2] ObjectDigestInfo OPTIONAL
-- if present, version must by v2
}
ObjectDigestInfo ::= SEQUENCE
{
digestAlgorithm AlgorithmIdentifier,
objectDigest OCTET STRING
}
AttCertIssuer ::= SEQUENCE
{
issuerName GeneralNames OPTIONAL,
baseCertificateId [0] IssuerSerial OPTIONAL
}
IssuerSerial ::= SEQUENCE
{
issuer GeneralNames,
serial CertificateSerialNumber,
issuerUID UniqueIdentifier OPTIONAL
}
AttCertValidityPeriod ::= SEQUENCE
{
notBeforeTime GeneralizedTime,
notAfterTime GeneralizedTime
}
|